Cybersecurity Awareness Month Week 3 – Threat Surge of AI Powered Phishing
AI Phish Facts:
Click to view full screen
- 82.6% of phishing emails now contain AI-generated content, and AI-crafted attacks achieve click rates 4.5x higher than traditional phishing (KnowBe4 / academic research)
- 54% vs. 12% – Click rate for AI-generated phishing vs. traditional phishing — a 4.5x difference (academic research cited by multiple security vendors)
- Security awareness training reduces phishing susceptibility by 86% within 12 months — dropping the click rate from 33.1% to 4.1% (KnowBe4 2025)
IBM researchers demonstrated in 2024 that an AI system could construct a complete, convincing phishing campaign in 5 minutes using just 5 prompts — a task that took human security experts 16 hours. KnowBe4’s data shows that in 2024, at least one AI-polymorphic feature was present in 76.4% of all phishing attacks, making them more resistant to blocklists, secure email gateways, and native security tools. Between September 2024 and February 2025, phishing emails increased 17.3% compared to the prior six-month period, with 57.9% sent from compromised legitimate accounts — making sender-reputation-based filters ineffective.
What You Should Do
Keep Your Systems and People Ahead of AI Phishing
Cybercriminals are using AI to create more convincing phishing emails that can bypass traditional security measures. Simply checking for suspicious keywords or unknown senders is no longer enough. At BMT, we understand the ongoing threat and offer effective security awareness training SMB programs that deliver ongoing microlearning experiences, keeping employees informed of emerging threats. Benefits Include:
BMT can help you stay one step ahead of evolving cyber threats. Find out how vulnerable your business may be with a FREE Cyber Risk Assessment and take the first step toward stronger email security.
